Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/d4Bwb6dLFku_UkOvAMMS7FUSUEQ.roa
File: d4Bwb6dLFku_UkOvAMMS7FUSUEQ.roa (raw, json)
Hash identifier: eeFJoaeGLxOiQz6cXzT6CRHE4Aq6RhN+PQxHj+Phf10=
Subject key identifier: 77:80:70:6F:A7:4B:16:4B:BF:52:43:AF:00:C3:12:EC:55:12:50:44
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 019DB5BFEADFEB5194CE77D0D3D4EB4C2243
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/d4Bwb6dLFku_UkOvAMMS7FUSUEQ.roa
Signing time: Wed 22 Apr 2026 15:12:26 +0000
ROA not before: Wed 22 Apr 2026 15:12:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135682
IP address blocks: 178.214.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b5:bf:ea:df:eb:51:94:ce:77:d0:d3:d4:eb:4c:22:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Apr 22 15:12:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7780706fa74b164bbf5243af00c312ec55125044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f4:0e:fb:49:2e:45:d7:1f:74:9c:a5:8a:36:
e4:5f:e5:05:df:f3:a5:27:18:d2:65:1a:0a:ad:4f:
7a:c8:ac:d0:ac:cb:8e:95:22:1b:30:70:44:60:8b:
04:79:b0:cb:2c:58:08:cd:a0:36:c3:b4:55:47:62:
a1:1b:c7:3b:67:f1:cd:77:73:07:17:68:7e:50:72:
aa:2b:5b:f7:fa:50:c3:1c:e2:ce:94:39:08:ec:1b:
d7:f0:a1:0a:dc:e9:95:6a:59:27:27:9a:be:ea:69:
4a:3c:cc:65:bc:24:ca:76:c2:d0:10:e1:de:f5:c6:
65:5d:44:cf:09:31:da:1b:a0:71:58:a3:f9:2e:7e:
0f:46:78:85:37:76:23:c9:97:d6:04:55:4c:ff:83:
3d:21:70:fb:0e:46:b5:4b:d5:5c:ee:44:a2:e9:0b:
b2:12:11:c8:fa:47:21:be:f6:d5:bf:b1:99:aa:cc:
ee:36:bd:aa:12:50:70:50:c7:3c:da:bb:e1:ff:4f:
c4:12:af:33:e0:75:bc:00:ef:33:a6:51:78:8a:76:
48:d0:f5:86:1b:23:33:7a:01:16:56:c4:fe:03:c7:
0c:d8:c5:a0:61:f7:d8:16:ad:f2:44:fd:8b:53:aa:
af:0f:56:34:4d:19:fe:1b:71:ea:3c:12:b4:a8:b0:
f9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:80:70:6F:A7:4B:16:4B:BF:52:43:AF:00:C3:12:EC:55:12:50:44
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/d4Bwb6dLFku_UkOvAMMS7FUSUEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.212.0/24
Signature Algorithm: sha256WithRSAEncryption
39:b7:97:e6:0f:34:ac:81:11:86:6c:fd:0f:48:cf:a8:83:34:
cb:c2:3a:bd:3f:95:a8:5f:3f:f8:42:e9:a3:dd:91:c3:3e:fc:
ac:1c:64:89:fd:9a:d7:bc:0a:87:3d:c9:aa:b6:be:e6:2d:24:
15:d0:bb:fb:7f:6f:7d:98:c4:ac:80:a4:0d:38:bb:e6:32:7e:
b5:f6:3f:98:58:00:25:cf:9c:d4:87:f6:13:1f:8d:58:75:39:
a8:91:76:cf:7f:78:09:d0:bc:56:66:1e:05:2f:b4:97:12:7b:
6a:13:01:e4:b1:1a:41:9f:db:fc:18:0b:53:3e:60:74:03:b1:
57:d2:74:76:62:01:88:b7:fb:86:d9:8e:67:64:72:99:14:60:
45:35:e9:21:c4:70:55:f9:86:2b:0f:a3:85:a6:9f:64:93:0d:
aa:66:4b:de:c7:7b:24:5a:f7:b8:d2:41:9a:0a:b4:44:b3:6f:
50:b8:43:88:62:cc:6e:aa:e7:86:45:bb:a8:d4:1f:96:48:ca:
1c:36:44:3a:c7:71:71:86:53:3c:e7:a4:15:47:ac:74:37:87:
72:38:bd:69:22:70:f0:a8:d7:69:d2:03:9b:cd:92:96:c2:04:
ce:53:94:fe:cb:68:8a:fb:7c:fa:33:60:52:b8:38:c2:94:ac:
cc:4c:88:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ21v+rf61GUznfQ09TrTCJDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNmIwYzAwMWE5OWFiNjI5NmUyNDIxNzNiZjdlN2ZkY2Yw
M2MwMTkwHhcNMjYwNDIyMTUxMjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzgwNzA2ZmE3NGIxNjRiYmY1MjQzYWYwMGMzMTJlYzU1MTI1MDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/QO+0kuRdcfdJylijbkX+UF3/Ol
JxjSZRoKrU96yKzQrMuOlSIbMHBEYIsEebDLLFgIzaA2w7RVR2KhG8c7Z/HNd3MH
F2h+UHKqK1v3+lDDHOLOlDkI7BvX8KEK3OmValknJ5q+6mlKPMxlvCTKdsLQEOHe
9cZlXUTPCTHaG6BxWKP5Ln4PRniFN3YjyZfWBFVM/4M9IXD7Dka1S9Vc7kSi6Quy
EhHI+kchvvbVv7GZqszuNr2qElBwUMc82rvh/0/EEq8z4HW8AO8zplF4inZI0PWG
GyMzegEWVsT+A8cM2MWgYffYFq3yRP2LU6qvD1Y0TRn+G3HqPBK0qLD5vQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHeAcG+nSxZLv1JDrwDDEuxVElBEMB8GA1UdIwQY
MBaAFFxrDAAamatiluJCFzv35/3PA8AZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jODk2NzctMWQ5YS00MThkLTg1OTMt
YzE4ZTNjY2M3NDJiLzEvZDRCd2I2ZExGa3VfVWtPdkFNTVM3RlVTVUVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9jODk2NzctMWQ5YS00MThkLTg1OTMtYzE4ZTNjY2M3NDJi
LzEvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstbUMA0G
CSqGSIb3DQEBCwUAA4IBAQA5t5fmDzSsgRGGbP0PSM+ogzTLwjq9P5WoXz/4Qumj
3ZHDPvysHGSJ/ZrXvAqHPcmqtr7mLSQV0Lv7f299mMSsgKQNOLvmMn619j+YWAAl
z5zUh/YTH41YdTmokXbPf3gJ0LxWZh4FL7SXEntqEwHksRpBn9v8GAtTPmB0A7FX
0nR2YgGIt/uG2Y5nZHKZFGBFNekhxHBV+YYrD6OFpp9kkw2qZkvex3skWve40kGa
CrREs29QuEOIYsxuqueGRbuo1B+WSMocNkQ6x3FxhlM856QVR6x0N4dyOL1pInDw
qNdp0gObzZKWwgTOU5T+y2iK+3z6M2BSuDjClKzMTIhe
-----END CERTIFICATE-----
Generated at Wed May 13 04:55:07 2026 by rpki-client